2. Categories of Personal Data which We Collect
The categories of personal data we may collect and use about you will vary depending on your level of engagement with us. Initially, we may collect your name, mailing address, contact numbers and email address, and/or information about the nature of your enquiry. We may also automatically collect information about the devices you use to interact with our websites. The information we automatically collect may include internet protocol addresses, device identifiers, web browser, and browsing information collected through cookies and other similar technologies on our website. The information automatically collected will be associated with any personal data you have provided.
You may provide us voluntarily with information in order to use, or participate in, certain features of our services, such as registering for an account; making a purchase; applying for a job; submitting a survey response; requesting support or assistance; signing up for or registering an activity or a loyalty program; making a donation etc..
Certain personal data are required for specific services or products and if you fail to supply such personal data as requested for the specific service or product, we may not be able to deliver you the service or product.
Our services are not designed for or targeted at, children younger than 18 years old, and we do not intentionally collect or maintain personal data about anyone under the age of 18. If you are under 18 years old, please ask your parent or guardian to interact with us on your behalf.
3. The Purpose and Basis of Our Use of Your Personal Data
We may collect personal data directly from you when you:
- visit our websites and/or submit paper or online forms and/or register for an account;
- engage or enquire about the services, products, events, facilities, promotions or marketing or other activities offered by us and/or third parties;
- call us, email us or contact us via social media;
- complete questionnaires or surveys;
- provide feedback;
- make a complaint; or
- enter into any transaction with us or request information in relation to entering into a transaction.
We may also indirectly obtain personal data of you from third parties when you:
- visit a third-party site that links to our website (for example New Frontier) or an estate agent website and request information about one of
- our products, services or property developments;
- engage with other property, investment or finance companies that we have arrangements with;
- engage with solicitors, financial advisers, surveyors, and estate agents involved in your search for, and purchase of, properties or products or services from us; or
- apply for a loan with us where information is collected from credit reference and anti-fraud agencies.
Our use of your personal data depends on how and where you interact with us. In some situations, the collection of personal data may be required for the operation of websites or the provision of certain services, products, events, promotions or marketing or other activities. If we are marketing to you, we will also do so with your consent or where otherwise permitted by law.
4. Link to Other Websites
6. People Who May Process Your Personal Data
Your personal data may be received and processed by the following categories of third parties located within or outside Hong Kong:
- our own employees for the management and administration of our business;
- third-party data processors who provide support services to us and who will process your personal information on our behalf. Such third parties may include IT service providers as well as marketing companies that we use;
- independent financial advisors, estate agents and solicitors that help you with your dealings or purchase of our products or services;
- third-party service providers who assist us in providing or performing services, functions and activities on our behalf to support our interactions with you;
- any prospective buyer or lender, as the case may be, being part of certain due diligence processes in the event of a re-organization, merger, sale, joint venture, acquisition, or other transfer or disposition of all or any part of our business or assets; and/or
- parties that we have a legal obligation to disclose information to, for example regulators and law enforcement agencies.
7. Retaining Your Personal Data
8. Direct Marketing
Where you agree (or where otherwise permitted by law), we will send you information about any new services, products, events, facilities, promotions or marketing or other activities which may be of interest to you, according to available methods of communication. Even after you agree and ask us to send you information, you can always unsubscribe or withdraw your consent at any time, and we shall stop sending you marketing materials.
9. Automated Decision Making and Profiling
We may, in some cases, use automated decision making and/or profiling, if it is authorized by legislation, if you have provided an explicit consent or if it is necessary for the performance of a contract. You can always request a manual decision making and/or profiling process instead, express your opinion or contest a decision and/or profiling based solely on automated processing and/or profiling, if such a decision would produce legal effects or otherwise similarly significantly affect you.
When using automated decision-making we will provide you with further information about the logic involved, as well as the significance and the envisaged consequences to you.
We endeavor to keep your personal data secure. We have set up technical and organizational systems and processes to prevent unauthorized access or disclosure of your personal data. We also check that any third parties that we deal with maintain reasonable measures to safeguard the security of the personal data they process.
11. Your Rights
You have certain rights regarding how we use and keep your personal data. These include:
- A right to be informed whether and how we process your data.
- A right to withdraw your consent at any time if your personal data is processed on the basis of your consent. The withdrawal of your consent does not affect the lawfulness of processing based on consent before its withdrawal.
- Where permitted by law, you may have the right to request access to your personal data for the purposes of reviewing, modifying or requesting deletion of the data.
- You may have a right to request a copy of your personal data and to have any inaccuracies in that data corrected.
- You may unsubscribe from mailing lists or any paper or online registration.
- You have a right to lodge a complaint with a supervisory authority. However, if you have a complaint about our handling of your personal data, please contact us using the information provided under the “Contact Us” section of this Statement as we would appreciate the opportunity to deal with your concerns before you approach a regulator.
You may also have the right, in certain circumstances to:
- object to the processing of your personal data;
- be provided with a copy of any personal data that we hold about you. The exceptions to this right include if the information is legally privileged or the information can reveal personal data about another person;
- to require us to delete your personal data without undue delay;
- to “restrict” our use of your personal data, for example if you want us to establish its accuracy or the reason for processing it;
- to object to decisions based exclusively on the automated processing of your personal data;
- to require your personal data which we have obtained by automated means to be provided to you in a machine-readable format so that they can be ported to a replacement service provider.
You can exercise your rights by contacting us using the details below. However, we will require you to produce satisfactory proof of your identity and we may charge you a reasonable fee for the administrative costs in certain circumstances. If a fee is necessary, we will inform you of the fee before processing your request.
12. Contact Us
You can contact us at any time by post to designated legal officers of The Legal Department, Nan Fung Group, 23rd Floor, Nan Fung Tower, 88 Connaught Road Central, or email us at firstname.lastname@example.org.